142 Unknown user name or bad password attempts jallenaz 09.07.2007 01:12:02 In our Security Log there were 142 occurrences of Unknown user name or bad password. Were we under an attack of some sort, and did I set something up wrong so that someone could do that? Is there something I should be fixing? I am new to a domain network and just set up the server with SBS. We are connected to the internet with a Linksys router and using its firewall. I have set up two computers to use RWW but haven't configured that yet. We have 10 client computers on the network. Thanks, Jim Allen

Re: 142 Unknown user name or bad password attempts "Henry Craven {SBS-MVP}" <sme[ at ]nevernever.lan> 09.07.2007 01:39:24 Par for the course here... all my clients are having their doors rattled. ....It's a bad world out there don't you know.... you versus the Bots. Don't worry about the ones that don't get in... worry about the ones that DO. The only time I get worried is when I -don't- see them ... I'm then checking to see if anyone -did- log on. Make sure you have - really secure - long and complex passphrases and only the absolute minimum attack surface. -- Henry Craven {SBS-MVP} "jallenaz" <jallenaz[ at ]discussions.microsoft.com> wrote in message news:4FD94D4C-2CA5-48AC-A51A-EA61F057B1F4[ at ]microsoft.com... [Quoted Text] > In our Security Log there were 142 occurrences of Unknown user name or bad > password. Were we under an attack of some sort, and did I set something > up > wrong so that someone could do that? Is there something I should be > fixing? > > I am new to a domain network and just set up the server with SBS. We are > connected to the internet with a Linksys router and using its firewall. I > have set up two computers to use RWW but haven't configured that yet. We > have 10 client computers on the network. > > Thanks, > > Jim Allen

Re: 142 Unknown user name or bad password attempts "Cris Hanna [SBS-MVP]" <crisnospamhanna[ at ]computingnospampossibilities.net> 09.07.2007 01:53:40 most likely its attempts to get into your network From the server, go to www.grc.com and run the Shields up program and find out what ports you have open -- Cris Hanna [SBS-MVP] ------------------------------ Please do not contact me directly, only respond in the Newsgroups MVPs do not work for Microsoft ------------------------------ Send via Windows Mail on Vista Ultimate connected to SBS 2003 R2 "jallenaz" <jallenaz[ at ]discussions.microsoft.com> wrote in message news:4FD94D4C-2CA5-48AC-A51A-EA61F057B1F4[ at ]microsoft.com... [Quoted Text] > In our Security Log there were 142 occurrences of Unknown user name or bad > password. Were we under an attack of some sort, and did I set something > up > wrong so that someone could do that? Is there something I should be > fixing? > > I am new to a domain network and just set up the server with SBS. We are > connected to the internet with a Linksys router and using its firewall. I > have set up two computers to use RWW but haven't configured that yet. We > have 10 client computers on the network. > > Thanks, > > Jim Allen

Re: 142 Unknown user name or bad password attempts jallenaz 09.07.2007 04:26:03 Thanks Henry. That's what I expected and hoped it would be. Now I can explain to the workstation operators that this is the reason they need strong passwords. If a bot used their name and guessed the password they would be in our network. I'll use Cris's advice. I've used the Shields up program at home before and was trying to remember where it was on the web. Thanks Cris also. Jim